๐ง๐ท
Peregrine
2026-09-25 03:15:25
(1 day ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.53.141.47 172.71.119.19 - - [22/Sep/2026:11:30:5 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.53.141.47 172.71.119.19 - - [22/Sep/2026:11:30:59 -0300] "GET /api/.env HTTP/1.1" 404 18149
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-09-24 03:15:13
(2 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.53.141.47 172.71.119.19 - - [22/Sep/2026:11:30:5 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.53.141.47 172.71.119.19 - - [22/Sep/2026:11:30:59 -0300] "GET /api/.env HTTP/1.1" 404 18149
show less
Bad Web Bot
๐ช๐ธ
pipeline.es
2026-09-23 09:54:27
(2 days ago)
Web scanning / probing for vulnerable paths
Port Scan
Web App Attack
Anonymous
2026-09-22 23:17:12
(3 days ago)
Spring Cloud Function Remote Code Execution (CVE-2022-22963).
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-09-22 22:24:29
(3 days ago)
Brute-Force
Web App Attack
๐ฉ๐ช
macrob
2026-09-22 21:43:47
(3 days ago)
2026/09/22 21:43:46 [error] 1636364#1636364: *26296438 access forbidden by rule, client: 34.53.141.4 ...
show more
2026/09/22 21:43:46 [error] 1636364#1636364: *26296438 access forbidden by rule, client: 34.53.141.47, server: binixo.com.br, request: "GET /.env.prod HTTP/2.0", host: "binixo.com.br", referrer: "https://www.binixo.com.br/.env.prod"
2026/09/22 21:43:46 [error] 1636366#1636366: *26295979 access forbidden by rule, client: 34.53.141.47, server: binixo.com.br, request: "GET /.env.save HTTP/2.0", host: "binixo.com.br", referrer: "https://www.binixo.com.br/.env.save"
2026/09/22 21:43:46 [error] 1636368#1636368: *26296531 access forbidden by rule, client: 34.53.141.47, server: binixo.com.br, request: "GET /.env.old HTTP/2.0", host: "binixo.com.br", referrer: "https://www.binixo.com.br/.env.old"
...
show less
Web App Attack
๐บ๐ธ
paulo.apoloni
2026-09-22 21:35:56
(3 days ago)
34.53.141.47 - - [22/Sep/2026:18:35:53 -0300] "GET /rclone.conf HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Ma ...
show more
34.53.141.47 - - [22/Sep/2026:18:35:53 -0300] "GET /rclone.conf HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
34.53.141.47 - - [22/Sep/2026:18:35:54 -0300] "GET /.env.old HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
34.53.141.47 - - [22/Sep/2026:18:35:54 -0300] "GET /.env.save HTTP/2.0" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.53.141.47 - - [22/Sep/2026:18:35:54 -0300] "GET /api/.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.53.141.47 - - [22/Sep/2026:18:35:55 -0300] "GET /backend/.env HTTP/2.0" 444 0 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
pipeline.es
2026-09-22 17:57:53
(3 days ago)
Web scanning / probing for vulnerable paths | URL: /actuator/configprops | Evidence: awureviagens.co ...
show more
Web scanning / probing for vulnerable paths | URL: /actuator/configprops | Evidence: awureviagens.com.br 34.53.141.47 - - [22/Sep/2026:19:57:05 +0200] \"GET /actuator/configprops HTTP/2.0\" 404 21489 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)\" GEOIP_COUNTRY_CODE=BE | ASN: GOOGLE-CLOUD-PLATFORM | Country: BE
show less
Port Scan
Web App Attack
Anonymous
2026-09-22 16:37:14
(3 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ซ๐ท
mrcrassi
2026-09-22 14:57:51
(3 days ago)
Triggered Cloudflare WAF (firewallManaged) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (POST metho ...
show more
Triggered Cloudflare WAF (firewallManaged) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /api
UA: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-09-22 14:31:06
(3 days ago)
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 34.53.141.47 172.71.119.20 - - [22/Sep/2026:11:30:59 -03 ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 34.53.141.47 172.71.119.20 - - [22/Sep/2026:11:30:59 -0300] "GET /asset-manifest.json HTTP/1.1" 404 18149
34.53.141.47 172.71.119.19 - - [22/Sep/2026:11:30:59 -0300] "GET /manifest.json HTTP/1.1" 404 18149
34.53.141.47 172.71.119.20 - - [22/Sep/2026:11:30:59 -0300] "GET /webpack-stats.json HTTP/1.1" 404 18149
34.53.141.47 172.71.119.20 - - [22/Sep/2026:11:30:59 -0300] "GET /static/manifest.json HTTP/1.1" 404 18149
34.53.141.47 172.71.119.20 - - [22/Sep/2026:11:30:59 -0300] "GET /pnn8o9quqkyw6qtxv99h HTTP/1.1" 404 18149
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
pipeline.es
2026-09-22 12:54:01
(3 days ago)
Web scanning / probing for vulnerable paths | URL: /api/settings | Evidence: escalaturismo.com.br 34 ...
show more
Web scanning / probing for vulnerable paths | URL: /api/settings | Evidence: escalaturismo.com.br 34.53.141.47 - - [22/Sep/2026:14:53:22 +0200] \"GET /api/settings HTTP/2.0\" 404 21548 \"-\" \"CCBot/2.0 (https://commoncrawl.org/faq/)\" GEOIP_COUNTRY_CODE=BE | ASN: GOOGLE-CLOUD-PLATFORM | Country: BE
show less
Port Scan
Web App Attack
๐ช๐ธ
pipeline.es
2026-09-22 12:34:03
(3 days ago)
Web scanning / probing for vulnerable paths | URL: /trace.axd | Evidence: evoluirturismo.com.br 34.5 ...
show more
Web scanning / probing for vulnerable paths | URL: /trace.axd | Evidence: evoluirturismo.com.br 34.53.141.47 - - [22/Sep/2026:14:33:35 +0200] \"GET /trace.axd HTTP/2.0\" 404 18851 \"-\" \"Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)\" GEOIP_COUNTRY_CODE=BE | ASN: GOOGLE-CLOUD-PLATFORM | Country: BE
show less
Port Scan
Web App Attack
Anonymous
2026-09-22 10:08:35
(3 days ago)
34.53.141.47 - - [22/Sep/2026:07:08:34 -0300] "GET /.env?raw?? HTTP/2.0" 403 817 "https://guiadovare ...
show more
34.53.141.47 - - [22/Sep/2026:07:08:34 -0300] "GET /.env?raw?? HTTP/2.0" 403 817 "https://guiadovarejo.com.br/@fs/../.env?raw??" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.53.141.47 - - [22/Sep/2026:07:08:35 -0300] "GET /.env HTTP/2.0" 403 817 "https://guiadovarejo.com.br/_nuxt/../.env" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
Port Scan
๐ฌ๐ง
consul.to
2026-09-22 09:43:02
(3 days ago)
Web attack/malicious scanning detected
Web App Attack